Comment Comment by iamtew You could just GPG sign your commits, then you can know for sure where the commit is coming from. parent iamtew 8 years ago